
module nginx 1.0;

require {
	type httpd_t;
	type var_t;
	type user_home_t;
	class file { getattr open read };
}

#============= httpd_t ==============

#!!!! This avc can be allowed using the boolean 'httpd_read_user_content'
allow httpd_t user_home_t:file { open read };

#!!!! WARNING: 'var_t' is a base type.
#!!!! The file '/var/www/invest_back/public/index.php' is mislabeled on your system.  
#!!!! Fix with $ restorecon -R -v /var/www/invest_back/public/index.php
allow httpd_t var_t:file getattr;
